Skip to content
OpenAdvisories

Package · Ubuntu

python-gnupg

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.5
    CVE-2019-6690 Public exploit

    Improper Input Validation python-gnupg

    python-gnupg 0.4.3 allows context-dependent attackers to trick gnupg to decrypt other ciphertext than intended. To perform the attack, the passphrase to gnupg must be controlled by the adversary and the ciphertext should be trusted. Related to a "CWE-20: Impr…

    python-gnupg python-gnupg python-gnupg Debian Ubuntu PyPI
  • Unscored —
    CVE-2018-12020

    mainproc.c in GnuPG before 2.2.8 mishandles the original filename during decryption and verification actions, which all…

    gnupg2 gnupg2 gnupg enigmail Debian Ubuntu Alpine
  • High 7.5
    CVE-2014-1927

    python-gnupg's shell_quote function does not properly quote strings

    The shell_quote function in python-gnupg 0.3.5 does not properly quote strings, which allows context-dependent attackers to execute arbitrary code via shell metacharacters in unspecified vectors, as demonstrated using "$(" command-substitution sequences, a di…

    python-gnupg python-gnupg python-gnupg Debian Ubuntu PyPI
  • Critical 9.8
    CVE-2013-7323

    python-gnupg allows context-dependent attackers to execute arbitrary commands via shell metacharacters

    python-gnupg before 0.3.5 allows context-dependent attackers to execute arbitrary commands via shell metacharacters in unspecified vectors.

    python-gnupg python-gnupg python-gnupg Debian Ubuntu PyPI